CardChingHome

Privacy Policy

How CardChing collects, uses, protects, and shares your information when you use our spending tracking application and related services.

Last updated: September 30, 2026

1. Information We Collect

CardChing collects only the information necessary to provide our spending tracking service. We collect:

  • Account information: Name and email address, provided through your Google or Apple sign-in
  • Transaction data: Transaction details you enter manually or via receipt scanning, including merchant names, amounts, dates, and categories
  • Receipt images: Photos of receipts you upload for automatic data extraction
  • Account information: Optional account labels, balances, account types, and currencies you add for budgeting
  • Device identifier: A randomly generated device ID stored locally on your device and sent with guest scans for rate limiting purposes

2. How We Use Your Information

We use your information to:

  • Provide and improve the CardChing service
  • Provide spending insights and help you track budgets
  • Extract transaction details from receipt images using AI processing
  • Track your spending patterns and budget progress
  • Manage your subscription and account

3. Third-Party Services

CardChing uses the following third-party services to operate:

  • Clerk — Authentication and account management. Clerk processes your sign-in credentials and profile information. Clerk Privacy Policy
  • Convex — Cloud database and file storage for transaction data, account information, settings and receipt images. Convex Privacy Policy
  • Google Gemini API — Receipt processing, including guest scans. Your image and extraction context, such as currency and time zone, are sent to Google to extract transaction details. Data use and retention depend on Google's terms and account configuration; we do not promise zero retention or exclusion from model improvement. Gemini API terms
  • Expo — Push notification delivery through Apple and Google notification services. Notification payloads can include a device push token, merchant, amount, category and record identifiers. Expo Privacy Policy
  • RevenueCat — Subscription management for in-app purchases. RevenueCat processes purchase transactions through Apple's App Store. RevenueCat Privacy Policy

4. Data Storage and Security

Convex stores synced records and uploaded receipts. Convex documents encryption at rest and in transit; this is not end-to-end encryption. CardChing's services and the providers processing your data can read it. Anyone with a direct receipt image URL can open that image, so keep those links private.

The native app uses operating-system secure storage for Clerk session tokens and the cached Convex sign-in token. Offline records, queued images, widget summaries and shortcut credentials use other local storage; we do not promise separate app-level encryption for every local copy. Avoid including full payment card numbers, passwords or unnecessary personal details in images and notes. Manual entry does not send an image for AI processing. Read our security details.

5. Your Rights

You have the following rights regarding your data:

  • Access: All your data is accessible through the CardChing app at any time
  • Deletion: You can request account deletion from Settings → Profile. The process requests removal of your sign-in account and marks app data for scheduled cleanup after more than 30 days. This is not a guaranteed completion deadline or a recovery window. Audit records, older uploads with unresolved ownership, provider logs and backups, and device or exported copies may remain. See our retention and deletion details.
  • Portability: You can export your transaction data from the app
  • Correction: You can edit your profile information and transaction data at any time within the app

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Operating the service involves processing by providers described above. Their data use and retention are governed by their applicable terms, including the Gemini API terms for receipt processing.

7. Children's Privacy

CardChing is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending you a notification. Your continued use of CardChing after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at privacy@cardching.com.